ArqConf Cordoba 2019 - Franco Giovanolli - Weaving The Service Mesh

Daremos una introducción a Istio sobre Kubernetes, explicando como trabaja un "Service Mesh", la tecnologías de detrás de este y como usarlo para simplificar la transición hacia arquitecturas orientadas a microservicios.

Tendremos como caso de estudio, la implementación en el Ministerio de Finanzas de la Provincia de Cordoba.
Coordinador de IT en el Ministerio de Finanzas de la Provincia de Córdoba. entusiasta de tecnologías innovadoras. Pienso, luego insisto

Transcript

1. Weaving the Service Mesh . Reducing Microservices Architecture Complexity with Istio and Kubernetes
2. #!/bin/agenda >> whoami && history >> for svc in monolithic; do micro($svc); done >> ./pipe_ci_cd.sh >> kubernetes || service_mesh == istio >> kubectl apply -f istio-magic.yml
3. >> whoami && history
4. >> whoami && history
5. >> whoami && history Oracle DB Oracle Forms J2EE WEB Presencial Web
6. >> whoami && history Oracle DB Oracle Forms Presencial Web J2EE WEB SOA Entidades Externas
7. >> whoami && history Oracle DB Oracle Forms Presencial Web J2EE WEB SOA Entidades Externas
8. >> whoami && history +50% Trafico Web +30% Pagos electrónicos >2 millones de Cedulones CRECIMIENTO INTERANUAL
9. >> whoami && history 2017
10. >> whoami && history
11. >> for svc in monolithic; do micro($svc) done
12. >> for svc in monolithic; do micro($svc); done VERY UGLY MONOLITHIC SOFTWARE A B C D
13. >> for svc in monolithic; do micro($svc); done A B C D
14. >> for svc in monolithic; do micro($svc); done A B C D
15. >> for svc in monolithic; do micro($svc); done A B C D
16. >> for svc in monolithic; do micro($svc); done PAGOS ONLINE TRÁMITE S ONLINE % ERRORE S
18. >> for svc in monolithic; do micro($svc); done ...
20. >> for svc in monolithic; do micro($svc); done So many instances... Version & Environments Conflicts Deployment Resource Isolation & Utilization Resiliency Networking, Port Conflicts
21. >> ./pipe_ci_cd.sh
22. >> ./pipe_ci_cd.sh
23. >> kubernetes || service_mesh == istio
24. >> kubernetes || service_mesh == istio Beyond Deployment • Load Balancing • Fault Tolerance • Observability & Insight • Monitoring & Tracing • Circuit Breaking
25. >> kubernetes || service_mesh == istio Popular Open Source Tools ❏ Eureka - Service Registry ❏ Ribbon - Client Side LB ❏ Hystrix - Circuit Breaker ❏ Zipkin - Distributed Tracing ❏ Prometheus - Monitoring ❏ Grafana - Data Visualization
28. >> kubernetes || service_mesh == istio This is easy when... Single stack Framework w/ Spring Boot
29. >> kubernetes || service_mesh == istio This becomes more difficult... Multiple stack Multiple frameworks Polyglot Legacy
30. >> kubernetes || service_mesh == istio VERY IMPORTANT EXTERNAL SERVICES J2EE LEGACY
31. >> kubernetes || service_mesh == istio At the end of the day... Let Microservice A talk to Microservice B!
32. >> kubernetes || service_mesh == istio
33. >> kubernetes || service_mesh == istio What is a Service Mesh? A service mesh is a configurable infrastructure layer for services. Allows service developers to offload the the network communication work and focus more on the business logic.
34. >> kubernetes || service_mesh == istio Services A Proxy MONOLITHIC
35. >> kubernetes || service_mesh == istio Microservices A Proxy MICROSERVICES Microservices C Microservices B
36. >> kubernetes || service_mesh == istio Microservices A SERVICE MESH Microservices C Microservices B Microservices D Microservices F Microservices E Proxy Proxy Proxy Proxy Proxy Proxy
37. >> kubernetes || service_mesh == istio SERVICE MESH
38. >> kubernetes || service_mesh == istio
39. Services >> kubernetes || service_mesh == istio API’s
40. >> kubernetes || service_mesh == istio What is Istio? A Open Source platform to manage service interactions across containers and VM-based workloads. With key contributions from Google, IBM, Lyft and others Multi-environment and multi-platform, but Kubernetes first
41. >> kubernetes || service_mesh == istio The Idea of Istio ★ Visibility ★ Resiliency ★ Traffic Control ★ Security
42. >> kubernetes || service_mesh == istio Istio’s Architecture Istio needs to intercept all the network communication to and from every service. Envoy as Sidecar Proxy Logically split into two planes: The Data Plane and The Control Plane.
43. >> kubernetes || service_mesh == istio envoy Dynamic service discovery Load balancing TLS termination HTTP/2 gRPC proxying Circuit breakers Health checks Traffic split Traffic mirroring Retries Fault injection
44. >> kubernetes || service_mesh == istio The injected proxies represent the Data Plane
45. >> kubernetes || service_mesh == istio The Control Plane: • Pilot • Mixer • Citadel
46. >> kubernetes || service_mesh == istio
47. >> kubectl apply -f istio-magic.yml
48. >> if [ $QUESTIONS -gt 0 ]; then echo “$RSP” fi
49. >> while true; do printf “¡Muchas GRACIAS!\n” done